classroomio/apps/api/src/config/env.ts

import * as z from 'zod';

const envSchema = z.object({
  // Legacy Cloudflare R2 config (used when OBJECT_STORAGE_* vars are absent)
  CLOUDFLARE_ACCESS_KEY: z.string().optional(),
  CLOUDFLARE_ACCOUNT_ID: z.string().optional(),
  CLOUDFLARE_BUCKET_DOMAIN: z.string().optional(),
  CLOUDFLARE_RENDERING_API_KEY: z.string().optional(),
  CLOUDFLARE_SECRET_ACCESS_KEY: z.string().optional(),
  CLOUDFLARE_IMAGE_BUCKET_DOMAIN: z.string().optional(),
  APPROXIMATED_API_KEY: z.string().optional(),
  APPROXIMATED_TARGET_ADDRESS: z.string().optional(),
  // S3-compatible storage (MinIO, AWS S3, or other S3-compatible backends)
  OBJECT_STORAGE_ENDPOINT: z.string().optional(),
  OBJECT_STORAGE_REGION: z.string().optional(),
  OBJECT_STORAGE_ACCESS_KEY_ID: z.string().optional(),
  OBJECT_STORAGE_SECRET_ACCESS_KEY: z.string().optional(),
  OBJECT_STORAGE_FORCE_PATH_STYLE: z.string().optional(),
  OBJECT_STORAGE_BUCKET_VIDEOS: z.string().optional(),
  OBJECT_STORAGE_BUCKET_DOCUMENTS: z.string().optional(),
  OBJECT_STORAGE_BUCKET_MEDIA: z.string().optional(),
  /** Public URL base for media bucket (images, thumbnails). Required for image uploads. */
  OBJECT_STORAGE_MEDIA_PUBLIC_BASE_URL: z.string().optional(),
  /** Optional: endpoint for presigned URLs when different from internal (e.g. browser-reachable) */
  OBJECT_STORAGE_PUBLIC_ENDPOINT: z.string().optional(),
  NODE_ENV: z.enum(['development', 'production', 'test']).default('development'),
  OPENAPI_URL: z.string().optional(),
  PORT: z.string().optional(),
  REDIS_URL: z.string().optional(),
  PUBLIC_EMBED_BASE_URL: z.string().optional(),
  PUBLIC_SERVER_URL: z.string().optional(),
  SMTP_HOST: z.string().optional(),
  SMTP_PASSWORD: z.string().optional(),
  SMTP_PORT: z.string().optional(),
  SMTP_SENDER: z.string().optional(),
  SMTP_USER: z.string().optional(),
  ZOHO_TOKEN: z.string().optional(),
  TRUSTED_ORIGINS: z.string().optional(),
  PRIVATE_SERVER_KEY: z.string().optional(),
  PROJECT_ID_VERCEL: z.string().optional(),
  TEAM_ID_VERCEL: z.string().optional(),
  AUTH_BEARER_TOKEN: z.string().optional(),
  UNSPLASH_API_KEY: z.string().optional(),
  /** When 'true', instance runs in self-hosted mode: single org, auto-enroll as student, no org switching */
  PUBLIC_IS_SELFHOSTED: z.string().optional(),
  /** License key for enterprise features (SSO, token-auth, no-tracking, etc.) */
  LICENSE_KEY: z.string().optional(),
  /** Dashboard origin for invite/email links (e.g. https://app.yourdomain.com). When set, all email links point here instead of app.classroomio.com. Required for self-hosted. */
  DASHBOARD_ORIGIN: z.string().optional(),
  /**
   * Comma-separated list of Better Auth user emails allowed to access the
   * BullMQ dashboard at /admin/queues in production. Leave unset to keep the
   * dashboard hidden everywhere except dev.
   */
  QUEUE_DASHBOARD_ADMIN_EMAILS: z.string().optional(),
  /**
   * Bearer-token escape hatch for /admin/queues — useful for curl scripts or
   * when SSO is unavailable. When set, requests with `Authorization: Bearer
   * <token>` (or `?token=<token>`) bypass the email allowlist.
   */
  QUEUE_DASHBOARD_TOKEN: z.string().optional(),
  /** Optional Bearer token for Jina Reader (higher rate limits). */
  JINA_API_KEY: z.string().optional(),
  /** Max completed fetch_documentation_url calls per agent conversation (default 15). */
  AGENT_MAX_FETCHES_PER_CONVERSATION: z
    .string()
    .optional()
    .transform((v) => {
      if (v === undefined || v === '') {
        return 15;
      }

      const parsed = Number(v);

      return Number.isFinite(parsed) && parsed >= 1 ? Math.trunc(parsed) : 15;
    }),
  /** Max fetch_documentation_url calls per org per UTC day (default 500). */
  AGENT_MAX_FETCHES_PER_ORG_PER_DAY: z
    .string()
    .optional()
    .transform((v) => {
      if (v === undefined || v === '') {
        return 500;
      }

      const parsed = Number(v);

      return Number.isFinite(parsed) && parsed >= 1 ? Math.trunc(parsed) : 500;
    })
});

export const env = envSchema.parse(process.env);